Questions concerning Hidden User Accounts

Hi All,
I am considering making a hidden admin on my computer and using a standard account for daily use. This way I am less susceptible to exploits during day to day use, and if someone gets hold of my computer, they would have a harder time getting admin privileges as the admin account would be hidden.
I would also like to use Undercover to track my computer if it is stolen and I require a dummy or guest account for this. I recently set up a hidden admin account but the guest account was unable to be enabled after doing so. I suspect this is because the User ID of the Guest account is below 500 and I had set the computer to hide users with IDs below 500.
Is there are way around this? I know there is another method of hiding users, which I have not tried yet, where you add the user to the "HiddenUsersList". Perhaps it is possible to set the Guest User ID above 500?
I would like some advice before messing around with system settings, thanks

I would really suggest you don't bother with hidden admin accounts and definitely not with Undercover or any other antitheft software. despite any claims such software makers make, it VERY easy to override and most professional computer thieves know this. first, if you don't have a firmware password set then it's easy to set up a new admin account from single user mode or while booted from an install DVD. one can also erase the hard drive while booted from the install DVD or from another computer by booting yours in target mode. that will wipe any software protection you may have installed. Undercover and similar outfits will tell you that a firmware password will prevent any of that. But what they *won't tell you* is that a firmware password is easy to override given unrestricted physical access to a computer. just google it up and you'll see how. it's really not a big secret. Most stolen computers are wiped and resold within hours of theft.
as for changing UID of Guest you can try changing it to something above 500 and see what happens. I just tried it and set it to 601. seems to work ok but I wouldn't swear by it. you can experiment and see what happens. I'm changing mine back to 201.

Similar Messages

  • How to delete a hidden user account?

    I recently installed livescribe desktop on my computer and the "other" option at the login appeared.  The account is hidden, how do I delete it?  Is there a way to delete it through terminal?

    I found a solution to remove the "other" account that Livescribe creates.  It is on their forum
    http://www.livescribe.com/int/faq/support_forum.html#/forums/showthread.php?t=11 253&page=2
    Under the section
    To delete the hidden user account I opened Finder and looked for the following file under the following path: Macintosh HD /Library/Preferences/com.apple.loginwindow
    I deleted the file and rebooted. Mac rebuilt the login users list, which will reveal the Livescribe hidden account. Login using your admin account (not the Livescribe one) and then go to System Preferences, then Accounts. You will then see the Livescribe account. Delete it like you'd delete any normal account.
    This is not a very friendly install.  It opens all kinds of security concerns.  Livescribe should be warned, scolded, or something for doing this.  They also install an adobe app (adobe air) in the process making it look like an update.  this seems really sneaky and is not appreciated.
    I lost many hours searching, disconnecting my mac from the net and contemplating a full reformat and reinstallation until I found this. 
    NOT NICE AT ALL.
    At least I have gotten rid of the account now.

  • Help, hidden user account trouble need help

    i tried to create a hidden user account using the tuturial on : http://www.macosxhints.com/article.php?story=20080127172157404&query=hidden%2Bus er%2Baccount
    when i did it i restarted my computer and at login the account i created appeared i went on it then switched to my regular account and when i switched my regular account settings where messed up, first off the colour of everything on the screen was lighter than it should be and fast user switching which i had enabled was now disabled and when i enable it it doesnt work and if i close system prefs then re open it shows fast user switching off, i logged off so i could switch to the new one and when i logged on as the new one the colors where fine but i had caouple other problems, in this account fast user switching was enabled and so i switched to my original account where the problems from before still existed. i tried deleting the account by terminal typing: sudo dscl . delete /users/hidden
    hidden is what i named the new account by the way. now o restarted the computer and when the login screen came up it no longer showed the new account (named hidden) so i logged onto my original account but upon logging on the problems are back.
    someone please help. i dont want to but if i have to i will restore my mac but i need someone to tell me how and how to back up everything
    if you dont want to go to the link this is the terminal code i originally typed to create the user account
    sudo dscl . create /Users/$USERNAME
    sudo dscl . create /Users/$USERNAME PrimaryGroupID 0
    sudo dscl . create /Users/$USERNAME UniqueID 0
    sudo dscl . create /Users/$USERNAME UserShell /bin/bash
    sudo dscl . passwd /Users/$USERNAME $PASSWORD
    sudo dscl . append /Groups/admin GroupMembership $USERNAME
    --i replaced '$username' with hidden (the username i chode)
    and i replaced '$password' with the password i chose
    please through in any idea you have i am desperit!

    also i downloaded the thing on that page that says "i wrote a small script to automate the process, which you can get here" (here is a link)
    the download did nothing
    (that i know of)
    again any help would be greatly appricated

  • Question re: syncing User Accounts between 2 machines wirelessly. Possible?

    I'm soon to take delivery of a 24" iMac and I plan to have 2 User accounts on there for myself and my partner. My partner also has a G4 iBook.
    My question is, is there anyway that my partner can sync her account (documents and settings) on her iBook with her account on the iMac? ie. if she starts a Word document on one machine, then moves to the other machine and syncs, can she continue to edit the document, and vice versa?
    Is there something in OS X or third party that would facilitate this?
    Any advice much appreciated.
    Neil

    We do use portable accounts. This is so that we don't tie up the network letting users work directly from their network accounts. We also need to have the ability of our users to work at different computers, but still get access to their own stuff. We have it set up so that when a user logs onto another computer for the first time, he is asked if he wishes to create a portable home directory. We have them answer "yes". I think at that time it then brings down from their network account all their files and settings so that the new computer will look like any other computer that they already have worked at. This appears to creat what is called a mobile account on the computer. We also have syncing set up to sync at login and logout. This, hopefully will sync up their network directory to any changes made at different computers and thus make those changes appear on any other computer that they work at. Sometimes the user gets a message that their network account has changed since last logon and ask if they wish to sync to their network account or their local account. We normally tell them to sync to their network account, assuming that it has the newest changes. None of our users ever work offline from our network so their network account should always be the most recent version of any files. This is assuming that the syncing is working properly. Does this make any sense? Does it sound like we are doing this properly or is there a better, more efficient procedure?

  • Questions about Mobile User accounts

    I'm having some trouble fully grasping Mobile User accounts and hoping someone could clarify whether they would be appropriate in my situation.
    We have some non-"mobile" users that solely use one machine and we would like them to continue to use their local hard drives. Is a "Mobile" account the solution?
    Second, if a user is already using an independent Mac that is not bound to any server..is it possible to bind it, create a mobile account, then sync local with network home folders such that all of the current data in their existing Home folder is added to the Network Home folder? or must the account be started from scratch?
    Lastly, What if we did not want all that data synched to the Network Home because there is simply too much of it. Can we still enjoy the benefits of Network login while certain files are local (I assume this is what the synching prefs are all about?!?) Users use same machine for 99% of their work. only occasionally would it be nice to provide them access to their mail, etc from a different client
    PowerMac G4   Mac OS X (10.4.4)  

    I'll take some broad swipes at this and let the smarter people come fill in the details.
    We have a true 1:1 setup in our office and have moved to PHDs as a means of protecting against downtime. The thinking is that we will have a spare machine lying around with our base installation ready to go. If a user's machine fails we'll replace it with the spare machine, let it sync the user directory from the server, and we're back in business. It's no substitute for a real backup system, but it potentially avoids having to run a restore from your backups. It also reduces network traffic compared to plain networked homes, and still lets your users work if the server goes down, but provides the benefits of centralized management. John DeTroye wrote a nice article about this.
    If you've already got data on your "client" Mac you will need to move it onto the server. PHDs will download data from the server to the client on the first sync, but will not upload a complete home directory from the client to an empty directory on the server. You'll find some posts in this forum discussing how people have gone about migrating data prior to that first sync.
    WGM allows you to establish exclusions for stuff you don't want to sync.
    One thing to watch out for in the scenario you describe is the so-called "rabbit effect." Assume Bob uses Mac1 as his primary machine. If one day he logs into Mac2 his home directory will be downloaded to Mac2. Once he returns to Mac1 he'll still be cluttering up Mac2 with his data. If he logs into Mac3 the next day and Tom and Sue are also periodically logging into different machines, you can see how you'll end up with a mess pretty quickly.
    Hope this helps.

  • Delete Hidden User Accounts

    My girlfriend has a Powerbook G4 Titanium 867MHz and is running Panther 10.3.9. She had purchased it used and has had it for quite some time now. Ever since she bought it, it has had a user account labeled "Other" at the opening Log-in screen. She has tried to remove this by going into her System Preferences and clicking on Accounts, but the account labeled "Other", under Other Accounts, does not appear and therefore does not exist to be deleted. Has anyone else come across this problem and know how to fix it? Thanks.
    Mike

    Hi Robert and thank you for your input. Although you say that you are no expert, the fact that you had read about this or a similar problem has been incredibly insightful and I think I have stumbled onto something. I did a search for "other user", like you had suggested, restricting the category to "Mac OS X v10.3 & earlier", and found this discussion:
    http://discussions.apple.com/thread.jspa?messageID=1211679&#1211679
    Thanks to Rich JG's note, I was able to log into "Other..." using "root" as the username and the usual password. Once logged in, I went to System Preferences>Accounts and found that this account is the System Administrator (root) account. My girlfriend still an administrator title, but we don't know what to do now, with the root account.
    Does anybody know if we can delete the root account, without affecting the system? Are there precautionary measures we should take, before we make any changes?
    Once again, thank you all for your assistance.
    Mike

  • Hidden users

    I've researched the topic 'hidden users' here but all the questions seem to be about how you hide a user. I'd like to turn that round: When I used a freeware app called InforMac I found I had 24 hidden user accounts on my G5. Why? Who are these guys? Can I get rid of them? Or did I, unknowing, put them there myself?
    John

    Hi JTD
    Who are these guys?You should have all these system users on your machine (and maybe others if you have installed other software). This lists User ID (UID), short name, and full name:
    <pre>-2 nobody Unprivileged User
    0 root System Administrator
    1 daemon System Services
    99 unknown Unknown User
    26 lp Printing Services
    27 postfix Postfix User
    70 www World Wide Web Server
    71 eppc Apple Events User
    74 mysql MySQL Server
    75 sshd sshd Privilege separation
    76 qtss QuickTime Streaming Server
    6 cyrusimap Cyrus IMAP User
    78 mailman Mailman user
    79 appserver Application Server
    82 clamav Clamav User
    83 amavisd Amavisd User
    84 jabber Jabber User
    85 xgridcontroller Xgrid Controller
    86 xgridagent Xgrid Agent
    87 appowner Application Owner
    88 windowserver WindowServer
    91 tokend Token Daemon
    92 securityagent SecurityAgent</pre>It seems you have one more than me!
    Can I get rid of them?Definitely not! Let them stay 'hidden'.

  • Remove hidden users

    i used the "dscacheutil -q user" command to list the hidden user accounts on my machine.  one of them...
    name: _pencomm
    password: ********
    uid: 216
    gid: 216
    dir: /var/empty
    shell: /bin/bash
    gecos: Livescribe Pen Communication User
    was created when i installed livescribe on my machine.  i've since removed livescribe, but this hidden user account remains.
    how do i get rid of it?!?
    thanks.

    This command should delete the user:
    sudo dscl . delete /Users/ _pencomm
    Further queries should be made to
    https://discussions.apple.com/community/mac_os/mac_os_x_technologies#/?tagSet=10 48

  • Hidden User and ARD and Lion not a good mix

    Hi,
    We have a hidden user that we use to monitor students in school. If we upgrade to Lion on the client, the hidden user account will not work anymore with ARD authentication. I can login as the hidden user, but ARD will not accept the credentials for the hidden user. Has anyone else seen this or know how we can still maintain a hidden user and use ARD?

    This will get rid or your ant problem. This stuff really works. You put a few drops of the liquid on a little piece of paper and you will see TONS of them come and eat it. They take it back to their colony and it kills them all. The next day they are all gone. It's that quick.
    http://www.terro.com/
    -Bmer
    Mac Owners Support Group
    Join Us @ MacOSG.com
     An Apple User Group 
        MacOSG Podcast >>
    Note: I receive no compensation for product endorsements.

  • HELP! How Do I Delete Hidden Users?

    i'm running 10.6.7. i have a hidden user account on my machine created by a livescribe installation.  i've removed livescribe from my machine, but now want to delete the livescribe account that was created.  anyone know how to do this?
    ADthanksVANCE!
    mark

    How do you know it's a "hidden Account?"
    Don't know if this will help. To show all invisible Folders:
    Open terminal and copy/paste:
    defaults write com.apple.finder AppleShowAllFiles -bool true
    Reverting to the default of NOT showing hidden files:
    defaults write com.apple.finder AppleShowAllFiles -bool false
    Restart or Force Quit Finder required to take effect. Use the command
    killall Finder
    Or get EasyFind, set to show Invisible files, and search for it there. When you find it, try "Destroy" from EF or choose "Reveal in Finder" and move it to the Trash from there. You may need to enter your password.
    http://www.devon-technologies.com/download/index.html
    Message was edited by: WZZZ

  • Cannot access primary user account - even with Install CD

    I’ve been racking my brain trying to figure out how to solve a OSX problem for a friend that ran into some problems on his iMac. For some reason, he wasn’t able to log onto his user account – the only one on this computer. He didn’t try to change his password, but something strange must have happened.
    We tried to reset the password with an OS X install disc, but I couldn’t even find, much less access his user account. Thanks to the help of some folks at the Genius Bar of an Apple store, we were able to log onto the Root account and create a new account. I tried t recreate the original user account, but the computer wouldn’t allow it, as that account was already being used. If that user account was still active, why wasn’t I able to reset it with an install disc?
    I’ve rebuilt the volumes with Disk Warrior, and repaired permissions with Disk Utilities. I’m at a loss on how to deal with accessing the original user account, which has a lot of important data. I’ve copied the user data to an external drive, and I’m thinking I might be able to import various files – email data, photographs, and various documents, but I’m hoping there be an alternative to what seems like a tedious route. Other than using an install disc to reset the password to the user account it can’t seem to recognize, are there any other ways to gain access to this account?
    My friend’s computer is a G4 iMac running, I believe, 10.3.9.

    There are several possibilities as to why a user account may
    not be correctly available or a password to it reset to fix it.
    One of them may be, if the short name of the computer or of
    an account was changed by the user; and later the system
    may appear different or changed, with some of the user acct
    settings or preferences no longer as they were prior to that.
    There is a way to create a new admin level user account and
    then move the older user info into the new account; then go
    in and delete the other one. I am not certain as to how to do
    this; but the topic has come up in these discussions, and the
    general path is about the same from Panther through Leopard.
    A few details may be named different, but similar as things go.
    • Mac OS X: *How to change user short name* or home directory name:
    http://support.apple.com/kb/ht1428
    • How do I change owner's name in my Mac:
    http://www.askdavetaylor.com/howto_change_owners_name_applemac.html
    While these kinds of details may not be behind the exact problem in
    the computer in question, directory and user account issues do often
    have similar causes. Often, they are user-caused events. If the general
    Directory of information on the hard disk drive has a problem, the use
    of a third-party disk tool such as Disk Warrior is usually advised. If that
    were needed, usually more evidence across the system would appear.
    There may be a way to use a Setup Assistant to recreate a new user
    experience and start over with a new admin account and user name.
    Then go into the system to ferret out the old user info.
    +Sorry I can't be of more help; as I am being distracted by an elderly+
    +person who can't figure out why I am online or what it means to be.+
    Good luck & happy computing!

  • DPM Agent - attaching agent user account question

    Hi there,
    I have a question concerning the attachment of User Agents.
    During the wizard you get asked to fill in a user account which is domain user and local admin. I am working in a big organization and we use service accounts as much as we can. I found out the user account I am to use has insufficient rights, I have
    found out my own AD user account works for the attachment. It is alot of work to have another department in the organisation change the rights of the service account(s).
    I was wondering what purpose does the account you fill in serve. I have seen that the service runs under local system and I can't really find any information about what the user account actually does(right at that moment or later on, doesn't matter).
    I am asking this since I could use my own AD account if its just for authorization during the attachment but not if the account I fill in gets used in a later sitatuation.
    Can anyone clear this up for me?

    Hi,
    The User Account is only used for Installing and attaching the Agent on the remote Server/Client, so best will be to use a Domain Admin user.
    The Agent willalways run unter System Account, so no Special Service Account will be needed.
    Seidl Michael | http://www.techguy.at |
    twitter.com/techguyat | facebook.com/techguyat

  • My question is in regard to pc to mac migration. How do I migrate information from my pc with specific user account to an existing user account on my mac? I do not want to use multiple mac user accounts.

    My question is in regard to pc to mac migration. How do I migrate information from my pc with specific user account to an existing user account on my mac? I do not want to use multiple mac user accounts.

    https://discussions.apple.com/message/16371308#16371308

  • Help - iMac Storage/New user account question

    Ok - so I've assumed that my user account was corrupt as Ive been having problems with Safari crashing/freezing the whole of my Mac, but thats another storey.
    So i decided to create a new user account to delete the old one. I copied the following folders from my original user account into the shared folder first of all:
    Pictures
    Music
    Movies
    Documents
    I've now deleted the old account and copied these folders from Shared into my new user account - actually Ive just left Music, Pictures & Movies in shared and am going to point the relevant apps such as iTunes to the shared folder.
    The problem I have, is that I've lost over 100gb of storage somewhere on the Mac and I can't see where!
    As far as I can see, I've deleted everything so that there is only one copy now and have emptied the Trash folder.
    Anybody got any suggestions - perhaps a hidden folder somewhere?
    Thanks

    >>... I can't seem to see it anywhere anyway...
    It would be a folder or disk image (.dmg) in /Users, along with your current account home.
    >>I might try and get rid of the Events folder - not sure if I need that or not?
    iMovie (2013): Updating projects and events from previous versions of iMovie
    and especially
    iMovie (2013): Removing old libraries after updating
    say that you probably don't...
    'You can delete these folders if you no longer want to work with them in the previous version of iMovie.
    Before removing your projects and events, make sure they have been updated for iMovie version 10.'

  • Mavericks server alerts and User account questions

    Hi
    I'm looking for more detailed information about setting up Alerts in Mavericks Server, plus I seem to have a strange problem with new user accounts when setting up.
    More Info.
    I have a Mac Mini acting almost 100% exclusively as a Time Machine backup device with encryption of three portable computers on a wired network.  This was originally set up three years using Snow Leopard Server and a 2Tb external FireWire Drive.
    The external drive is now proving too small, and in any case is showing the possible first signs of failure when tested, so the intention is to replace it with a RAID of some sort, probably a 2-drive RAID 1 device but if the budget allows we might be able to look at RAID 5 or 6 units.
    It seems a good opportunity to clean install Mavericks Server on the Mini, so I've set up a test station on my MacBook Pro with my Mac Pro (both running 10.9.2) as a test backup client.  The Server OS is on an external FireWire boot drive, and the TM backup folders are on another external, in this case a USB 3.0
    For obvious reasons there does not seem to be any reason to turn on more services than absolutely necessary, so just Time Machine and File Sharing for the moment.  All works well but I can't seem to get Alerts working.  I've listed 3 different eMail addresses (all mine) for the alerts to be sent to, and I have two Admin Accounts for Notifications, both using the same AppleID I set the Server software up with.  I've gone through the rather sparse setup help information carefully, and there is no information about additional services being required, although I did try setting up the Mail client (tested sending and receiving) on the Server and having it running whilst the backups were being tested.
    As I said, the test backups went fine and when I disconnected the backup drive from the Server to simulate a failed drive the TM on the Mac Pro client showed an alert saying the backup drive could not be found.  However, there were no emails or Notifications received, either on the Mac Pro or my iPhone from the Server.
    There seems to be minimal amount of information available about the workings of Mavericks Server, but I have gone through what I can additionally find online about Mountain Lion Server, with no real indication of what it is that I am missing.  The only instructions seem to be exactly what I've done, so your advice would be appreciated.
    Another thing that puzzles me, is that when restarting the MacBook Pro I get all the Admin and Standard User Accounts (created in Server.app) showing at the login screen.  This is only four Accounts in total, so what would happen if this was 50 Users?  If I click on the 'User' tab in Server.app I get 83 User Accounts showing, but that was not the case until this evening, as only the Admin and Stardard User Accounts I had set up were visible.
    It's obviously possible that I've mucked up the install and basic setup somehow, but I can't see that anything I've done would have these effects as I've been careful to follow the options put in front of me.
    Thank you in advance.

    There's nothing to fetch. You assign the value from the function GET_APPLICATION_PROPERTY(USERNAME); as you would any value returned from a function.
    DECLARE
       myVar    VARCHAR2(50);
    BEGIN
       myVar := GET_APPLICATION_PROPERTY(USERNAME);
    END;Hope this helps.
    Craig...
    -- If my response or the response of another is helpful or answers your question please mark the response accordingly. Thanks!

Maybe you are looking for